CVE-2020-37094
HIGHEspoCRM 5.8.5 - Authentication Bypass via Authorization Header Manipulation
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2020-37094. PoCs published by Besim.
AI-analyzed exploit summary The writeup describes a privilege escalation vulnerability in EspoCRM 5.8.5 where manipulating the 'Authorization' and 'Espo-Authorization' headers allows an attacker to access other users' information. It includes technical details about the API request structure and encoding techniques.
Description
EspoCRM 5.7.0 prior to 5.9.0 contains an authentication token reuse vulnerability that allows authenticated attackers to bypass two-factor authentication by exploiting token-to-password-hash mapping in application/Espo/Core/Utils/Authentication/Espo.php. Attackers can obtain an authentication token for a controlled account and replay it against any victim account sharing the same password, since tokens are bound to password hashes rather than unique per-user values, bypassing the victim's 2FA protections.
Exploits (1)
The writeup describes a privilege escalation vulnerability in EspoCRM 5.8.5 where manipulating the 'Authorization' and 'Espo-Authorization' headers allows an attacker to access other users' information. It includes technical details about the API request structure and encoding techniques.
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N